canary-watch
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [SAFE]: No malicious code, obfuscation, or unauthorized data exfiltration patterns were detected. The skill's instructions are consistent with its stated purpose of monitoring deployment health.
- [NO_CODE]: The skill consists entirely of documentation and does not provide any executable scripts (e.g., Python, JavaScript) or shell command implementations to perform the monitoring tasks described.
- [PROMPT_INJECTION]: The skill describes a workflow that ingests content from external URLs to check for errors or regressions. This creates a potential surface for indirect prompt injection if a monitored site contains malicious instructions intended to influence the agent's behavior.
- Ingestion points: External web application URLs and API endpoints provided as monitoring targets (SKILL.md).
- Boundary markers: Absent; the instructions do not include delimiters or warnings to ignore instructions found within the monitored content.
- Capability inventory: None; the skill does not include any scripts or defined tools that perform actions like file writing or command execution.
- Sanitization: None; the skill does not describe any validation or filtering of the content retrieved from external sources.
Audit Metadata